Microsoft PowerPoint MCP Tools for AI Agents
Let an agent create presentations, add slides, read slide content, and update speaker notes in OneDrive.
Available Tools
12 tools available in this integration
MicrosoftPowerpoint.CreatePresentation Create a new PowerPoint presentation in OneDrive.
MicrosoftPowerpoint.CreateSlide Append a new slide to the end of an existing PowerPoint presentation in OneDrive.
MicrosoftPowerpoint.CreateTwoContentSlide Append a TWO_CONTENT slide with side-by-side content areas to a PowerPoint presentation.
MicrosoftPowerpoint.GetAllSlideNotes Get all speaker notes from every slide in a PowerPoint presentation.
MicrosoftPowerpoint.GetPresentation Get the content of a PowerPoint presentation as markdown.
MicrosoftPowerpoint.GetPresentationAsMarkdown Get the content of a PowerPoint presentation as markdown.
MicrosoftPowerpoint.GetSlideNote Get the speaker notes from a specific slide in a PowerPoint presentation.
MicrosoftPowerpoint.GetSlideNotes Get the speaker notes from a specific slide in a PowerPoint presentation.
MicrosoftPowerpoint.ListSlideNotes Get all speaker notes from every slide in a PowerPoint presentation.
MicrosoftPowerpoint.SetSlideNote Set or update the speaker notes on a specific slide in a PowerPoint presentation.
MicrosoftPowerpoint.SetSlideNotes Set or update the speaker notes on a specific slide in a PowerPoint presentation.
MicrosoftPowerpoint.WhoAmI Get information about the current user and their PowerPoint environment.
Why agent-optimized tools matter
Built for intent, not API schemas
Ask the agent to "create a presentation from this brief, add a slide for each section, and include speaker notes." Arcade picks the right PowerPoint actions without guessing presentation or slide IDs.
Up to 100x fewer tokens
PowerPoint reads return slide content and speaker notes as text, so the agent can review a deck or update one without loading binary presentation files into the model.
Complete the workflow end to end
Create a presentation, add slides, add side-by-side content, write speaker notes, and review the result through one toolkit designed around the complete presentation task.
Make actions predictable and controlled
Arcade tools return structured results and useful errors across users and runs. Teams can apply scope restrictions, redaction, and approval policies so agents follow the same controls every time.
Securing Microsoft PowerPoint
The more capabilities agents get, the more useful they are. However, more capabilities bring more risks of undesired effects such as data loss and exfiltration.
This is why Arcade provides you with contextual rules that dictate how and when a tool is allowed to run. Arcade’s contextual access lets you govern tool visibility and behavior at every stage of execution and control who can see a tool, what inputs are allowed, and what comes back.
Learn about Contextual Access PoliciesFor Microsoft PowerPoint, you can implement some of these policies:
- Hide MicrosoftPowerpoint.CreatePresentation from agents unless the roles your IDP marks as presentation owners are active, so an agent cannot create files in another user's OneDrive.
- Restrict MicrosoftPowerpoint.CreateSlide to agents operating under your presentation-editor role, so unreviewed automation cannot append content to shared presentations.
- Deny MicrosoftPowerpoint.SetSlideNotes to agents outside your approved authoring roles, so an agent cannot alter speaker notes that contain private meeting guidance.
- Hide MicrosoftPowerpoint.SetSlideNote from agents unless the roles your IDP marks as presentation owners or editors are active, so unreviewed automation cannot change presenter guidance.
- Require human approval before MicrosoftPowerpoint.CreatePresentation runs, so an agent cannot create an unapproved presentation in your organization's OneDrive.
- Block MicrosoftPowerpoint.CreateTwoContentSlide when either content area contains credentials, customer data, or confidential deal terms, so an agent cannot add sensitive material to a shared deck.
- Require human approval before MicrosoftPowerpoint.SetSlideNotes changes notes on an externally shared presentation, so an agent cannot publish private presenter guidance to collaborators.
- Require human approval before MicrosoftPowerpoint.SetSlideNote updates notes on a shared presentation, so an agent cannot publish confidential talking points without review.
- Redact MicrosoftPowerpoint.GetAllSlideNotes results, stripping credentials, personal phone numbers, and private meeting details before the model sees speaker notes.
- Deny the output of MicrosoftPowerpoint.GetPresentationAsMarkdown when the presentation is marked Confidential or contains customer records, so the model cannot receive the deck's private contents.
- Strip email addresses, tenant identifiers, and other personal account fields from MicrosoftPowerpoint.WhoAmI results, so the model receives only the identity details needed to select the right account.
- Redact credentials, access tokens, customer records, and confidential deal terms from MicrosoftPowerpoint.GetPresentation results before the model sees slide content.
- Strip personal phone numbers, private attendee details, and internal meeting decisions from MicrosoftPowerpoint.GetSlideNote results before returning speaker notes to the model.
- Deny MicrosoftPowerpoint.ListSlideNotes output when any slide note contains legal-hold material or information classified as strictly confidential, so the model cannot receive the presentation's protected guidance.
How to use Microsoft PowerPoint with your agent
Connect your MCP client to Arcade, authorize each user's Microsoft account, and start creating and reading PowerPoint files from prompts.
Your questions, answered
A Microsoft PowerPoint MCP server exposes presentation capabilities as structured tools that an AI agent can call through the Model Context Protocol. After a user authorizes their Microsoft account, the agent can create presentations in OneDrive, add slides, read slide content, and manage speaker notes.
Microsoft PowerPoint does not provide a first-party MCP server for these actions. Arcade provides the MCP connection, per-user OAuth, agent-optimized presentation actions, approval workflows, redaction, and scope controls around PowerPoint access.
Arcade agents can create presentations in OneDrive, append standard or two-content slides, read a presentation as Markdown, read speaker notes, add or update speaker notes, and identify the connected PowerPoint environment. They do not edit arbitrary existing slide elements beyond adding slides and changing notes.
Arcade requires Microsoft OAuth permissions that allow the enabled workflow to read and write PowerPoint files in OneDrive, along with the account access needed to identify the connected user and environment. Grant only the file and account permissions your workflow needs.
Yes. Each user authorizes their own Microsoft account through OAuth. PowerPoint actions run under that user's authorization, so the agent can access only the OneDrive files and permissions that user has approved.
Yes. Contextual Access policies can require human approval before consequential PowerPoint actions such as creating a presentation, adding slides, or changing speaker notes. The call proceeds only after the policy's conditions have been satisfied.
Arcade proxies PowerPoint and OneDrive API calls and does not persist your presentation content as part of normal tool execution. Credentials are brokered and stored encrypted at rest, and the model never receives raw credentials.
Any framework or client that can connect to Arcade's MCP gateway or tool APIs works, including LangChain, OpenAI Agents, CrewAI, Claude Desktop, Claude Code, Cursor, Visual Studio Code, Microsoft Copilot Studio, and GitHub Copilot.
Arcade refreshes access while the user's Microsoft authorization remains valid. If access is revoked, rotated, or can no longer be refreshed, PowerPoint actions stop until the user reconnects their Microsoft account.
Calls are subject to Microsoft Graph, OneDrive, and PowerPoint service limits, including throttling and account-level quotas. Your agent should handle rate-limit responses with backoff and retry rather than assuming unlimited presentation or file operations.